CWE-514—Covert Channel

Weakness Name

Covert Channel

Description

A covert channel is a path that can be used to transfer information in a way not intended by the system's designers.

Typically the system has not given authorization for the transmission and has no knowledge of its occurrence.

Common Consequences

Scope:

Confidentiality, Access Control

Impact:

Read Application Data, Bypass Protection Mechanism

Related Weaknesses

• CWE-1229Creation of Emergent Resource